Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/943afc43-e72f-300d-8eaa-5d7df1773a14.roa
File: 943afc43-e72f-300d-8eaa-5d7df1773a14.roa (raw, json)
Hash identifier: pv/GN833BpoTR1z1VOsVtLDGepQuaCxYV2myrkCClsw=
Subject key identifier: 79:B6:4C:CE:F8:75:DE:51:AE:FA:53:8A:4B:C6:AD:42:07:66:BB:49
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F43285847F7FB9CB119BFEB272134A400
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/943afc43-e72f-300d-8eaa-5d7df1773a14.roa
Signing time: Fri 22 Nov 2024 23:11:35 +0000
ROA not before: Fri 22 Nov 2024 23:11:35 +0000
ROA not after: Thu 20 Feb 2025 23:11:35 +0000
asID: 401507
IP address blocks: 23.129.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f7:fb:9c:b1:19:bf:eb:27:21:34:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Nov 22 23:11:35 2024 GMT
Not After : Feb 20 23:11:35 2025 GMT
Subject: CN=03e43d95-bee8-493a-a6ef-b7cf3825beb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:a0:bd:a9:d0:02:16:ff:6e:6a:e6:a9:8a:
ce:6c:ef:92:5b:2f:3b:16:1c:41:98:cc:7b:f0:f3:
e7:34:65:9b:b9:28:e2:22:8a:60:d8:e9:e8:62:eb:
f2:be:80:35:70:52:78:b0:7d:82:cc:54:89:b3:db:
7e:8c:ce:97:e5:a6:31:4b:4d:0d:8b:82:a3:f7:e3:
b1:36:65:47:42:30:5d:39:15:d4:88:0f:93:de:2c:
88:53:e7:f7:ce:7b:fd:c7:87:62:47:c8:b7:ee:e7:
67:0b:cb:af:b4:c8:15:aa:d8:08:ce:f6:f2:ce:79:
64:b4:7b:7b:76:33:fa:0d:43:48:17:ee:4b:cc:23:
4f:13:a9:f6:b7:2b:fc:bb:7a:36:16:13:d3:25:3a:
4e:88:a6:c1:3f:b9:c3:9c:37:d4:39:23:37:43:b0:
c6:88:55:ec:0c:8c:81:03:60:6b:d4:35:e1:90:99:
a2:da:2b:f9:e0:9c:cd:3e:b9:cf:7c:8e:2a:40:32:
f3:5d:27:b2:ac:c9:22:63:85:a9:bc:d2:2f:1f:e9:
31:7f:0d:74:48:69:40:5f:b3:37:90:60:7a:e4:e8:
1d:13:38:52:6e:62:c4:40:35:bf:b0:f2:07:66:ee:
f7:bc:a2:12:60:ef:c0:21:1f:68:53:26:b7:91:24:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:4C:CE:F8:75:DE:51:AE:FA:53:8A:4B:C6:AD:42:07:66:BB:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/943afc43-e72f-300d-8eaa-5d7df1773a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:5d:14:a3:a9:a0:a9:b4:90:ab:92:0c:b8:43:26:3b:f1:e7:
bf:26:74:d4:8c:18:fc:88:89:7d:07:d8:cc:9d:11:78:12:6f:
5c:8b:f4:2b:5d:f3:11:2b:fa:d3:c9:b3:7f:c8:b6:a7:cb:87:
d8:1c:e5:fc:13:c3:b4:08:15:30:9b:0e:98:7b:a4:88:dd:1a:
da:94:cc:43:bc:2c:ce:ac:e2:aa:f0:c9:c5:5f:86:47:cd:85:
9b:22:94:b5:20:55:18:15:2f:86:30:58:1d:39:1f:66:ee:79:
ec:b3:2c:74:1f:2d:ce:15:f4:62:5d:1a:4e:d6:99:b9:8a:2c:
0f:76:00:98:90:51:e1:71:7e:36:86:10:2a:61:72:45:a3:9b:
8a:18:bd:01:63:a9:8c:a7:a8:8f:03:26:fc:96:69:15:da:1a:
f9:d8:3a:10:84:a1:ec:24:a9:35:22:7b:76:6c:f0:41:e3:60:
d9:10:02:09:43:56:df:bb:82:b6:b6:4e:d7:ca:79:c9:b8:02:
ef:4d:e3:03:30:f3:e7:d5:22:cb:b7:13:c2:38:9f:eb:49:33:
d7:0d:f6:85:c0:37:4f:8a:6e:97:39:88:c5:17:e5:96:41:c8:
b1:ee:5b:d5:2c:53:44:5b:4d:a0:95:df:9c:ea:e4:4d:3e:d1:
13:b0:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:46 2025 by rpki-client